Summary: | Linux <2.6.26.1 tmpfs: fix kernel BUG in shmem_delete_inode (CVE-2008-3534) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Robert Buchholz (RETIRED) <rbu> |
Component: | Kernel | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | kernel |
Priority: | High | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=14fcc23fdc78e9d32372553ccf21758a9bd56fa1 | ||
Whiteboard: | [linux <2.6.25.14] [linux >=2.6.26 <2.6.26.1] | ||
Package list: | Runtime testing required: | --- |
Description
Robert Buchholz (RETIRED)
2008-08-15 12:47:43 UTC
Fixed in 2.6.25.14 and 2.6.26.1 Beware, the patch introduced an independent bug which was subsequently fixed in 2.6.25.17 and 2.6.26.4 respectively: "fbdefio: add set_page_dirty handler to deferred IO FB" http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=d847471d063663b9f36927d265c66a270c0cfaab Anyhow, hardened-kernel unaffected at present time. Removing alias. PS: genpatches-2.6.25-10 added 2.6.25.14. genpatches-2.6.25-3 added 2.6.26.1. |